10 Million Users Globally Exposed to Fake Crypto App Malware Campaign

A global cybersecurity threat has placed over 10 million individuals at risk through a sophisticated campaign involving fake cryptocurrency app advertisements, according to a report from Check Point, a leading cybersecurity firm [1]. The campaign, dubbed “JSCEAL,” mimics nearly 50 legitimate crypto platforms, including Binance, MetaMask, and Kraken, to lure users into downloading malware that steals sensitive data such as passwords, Telegram credentials, and cryptocurrency wallet information [1].

The malware uses JavaScript and advanced evasion techniques to remain undetected, making it particularly difficult to analyze and neutralize. It operates by displaying a fake interface that closely resembles the real application’s homepage, tricking users into believing they are downloading a legitimate app. While the user interacts with what appears to be the real platform, the malware runs in the background, collecting keystrokes, browser cookies, and other private data [1]. The stolen data is then sent to threat actors, who may use it to breach crypto wallets or monetize the information.

The scale of the campaign has been amplified by social media platforms, particularly Meta, where over 35,000 malicious advertisements were reported in the first half of 2025 [1]. An estimated 3.5 million users in the European Union encountered these deceptive ads, while users in Asia—regions with high cryptocurrency trading and social media usage—were also heavily targeted [1]. However, Check Point noted that the exact number of infected devices remains unclear, as not all ad impressions result in malware installation [1].

The campaign's use of obfuscation techniques and compiled code adds to its complexity, making it a significant threat to digital asset holders. The malware has the capability to manipulate crypto browser extensions, further increasing the risk of unauthorized access to digital wallets [1]. Given the campaign’s sophisticated nature and broad reach, the true impact may be even greater than initial estimates.

This incident highlights the growing risks associated with fake cryptocurrency applications and deceptive advertising tactics. As the crypto industry expands, so does the threat landscape, emphasizing the need for users to remain vigilant and for platforms to enhance their security measures to prevent such large-scale exploits [1].

Source:

[1] [10 Million People Globally Targeted by Fake Crypto App Ads, Check Point Warns](https://cryptonews.com/news/10-million-people-globally-targeted-by-fake-crypto-app-ads-check-point-warns/)